denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,054 Commits 1 Branch 0 Tags
ab40277fd0dd6c6c875c8928ce810aff2f5e7137
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 39a8e5a580 fixed some typos 2007-10-05 09:52:23 +00:00
Martin Willi 1169ab4ec7 removed recursive mutex and __USE_UNIX98, should fix uClibc build 2007-10-05 09:47:55 +00:00
Martin Willi 6705052c2d fixed bad cast which resulted in a crash on "ipsec update" 2007-10-05 09:13:03 +00:00
Martin Willi 493f377b41 fixed memory leak 2007-10-04 15:20:00 +00:00
Martin Willi c96aefe268 implemented an optional DH public value test 
some other cleanups, using RFC2631 variable names
 2007-10-04 15:19:24 +00:00
Martin Willi 40f10fd88e cleanups, fixes and simplification of diffie hellman code 2007-10-04 12:08:11 +00:00
Martin Willi a7e65d5262 implemented enumerator for linked_list 2007-10-04 08:40:20 +00:00
Martin Willi d62a4526fd moved enumerator from libappserv to libstrongswan 2007-10-04 08:21:53 +00:00
Martin Willi b9bc74979e fixed sqlite_backend compilation to respect changes from [3238] 2007-10-04 08:18:42 +00:00
Martin Willi 99670c3714 proper cleanup on error 2007-10-03 15:07:46 +00:00
Martin Willi 6a8e7381d0 more libstrongswan-like error handling in optionsfrom 2007-10-03 15:02:29 +00:00
Martin Willi 2970674faf reverted changeset [3215], as we need NULL callback to do asynchronous calls 
added interface_manager_cb_empty function, which calls synchronous but doesn't do anything
 2007-10-03 08:10:03 +00:00
Martin Willi a6f31da40a added missing enumerator implementation 2007-10-03 05:29:49 +00:00
Martin Willi 06d00e4f7b fixed "ipsec statusall" SPI formatting 2007-10-02 13:11:23 +00:00
Martin Willi e4c9b92171 fixed sqlite database path 2007-10-02 11:55:19 +00:00
Martin Willi 6e19327473 updated NEWS for 4.1.7 2007-10-02 11:36:54 +00:00
Martin Willi 754f90165f added thread initialization/deinitialization hooks 
moved empty_enumerator to a public implementation
 2007-10-02 11:23:14 +00:00
Martin Willi 06011f6882 remove control sockets on startup, as we don't have privileges on shutdown 2007-10-02 11:20:07 +00:00
Martin Willi a3f100fa09 improved debugging code for traffic selector processing 2007-10-02 07:39:56 +00:00
Martin Willi f9b8417a7c renamed force_encap to forceencaps (as it is named in openswan) 2007-10-02 06:57:58 +00:00
Martin Willi f53b74c96f moved force_encap to ike_config, enables responder to enforce udp encapsulation 
fixed bugs in force_encap code
 2007-10-01 16:41:34 +00:00
Martin Willi 011fb1b97e removed accidentally checked in debugging code 2007-10-01 12:25:26 +00:00
Martin Willi 9dae1bed00 implemented IKEv2 force_encap connection parameter 
enforces UDP encapsulation by faking NAT detection payloads
  to hurdle restrictive firewalls
 2007-10-01 12:19:39 +00:00
Martin Willi 92232dab33 fixed stuid()/setgid() and error handling 2007-10-01 09:07:10 +00:00
Martin Willi 9f3c55cdc4 fixed updown script privilige inheritance for pluto, too 2007-09-28 09:42:55 +00:00
Martin Willi f215e91999 implemented more aggressive MOBIKE path probing 
do not queue more than one MOBIKE task
 2007-09-28 08:22:37 +00:00
Martin Willi 052d58feaf fixed CHILD_SA SPI byte order in XML interface 2007-09-28 07:05:15 +00:00
Martin Willi 055d016b49 changed inheritable capability set to the permitted one to execute firewall script with CAP_NET_ADMIN 2007-09-28 07:04:09 +00:00
Martin Willi 780050cbc3 implemented proper argument parsing code 2007-09-28 06:43:59 +00:00
Martin Willi a57ab4d690 removed colons from session cookie 2007-09-27 13:10:10 +00:00
Martin Willi 85c6fc0283 reduced debbugging level 2007-09-27 13:09:50 +00:00
Martin Willi 983d7cd292 made add_ip()/del_ip() calls synchron (waiting until kernel event received) 
this should fix MOBIKE route migration with virtual IPs
 2007-09-27 12:48:00 +00:00
Martin Willi 93720075df implemented SHA1 encrypted passwords for manager 2007-09-27 07:15:47 +00:00
Martin Willi 324abae2ef added vsyslog to leak detectives white list 
removed debugging hook on openac cleanup
 2007-09-27 06:40:50 +00:00
Martin Willi 87d0427def updated TODO 2007-09-26 15:08:34 +00:00
Martin Willi 8207e3ea4d fixed argument processing bug 2007-09-26 15:07:34 +00:00
Martin Willi c295d0eb4b refactored strongswan manager 
removed buggy request parsing code, use ClearSilvers CGI kit instead
fixed CHILD_SA listing in manager (needs better design)
using secure XML communication through unix sockets
removed images with questionable (non-GPL) license
 2007-09-26 14:02:21 +00:00
Martin Willi d9d69536b0 improved MOBIKE roaming between interfaces 2007-09-24 12:15:25 +00:00
Martin Willi 740153e6f7 fixed typo / include 2007-09-18 13:30:01 +00:00
Martin Willi 8f561d4409 prototype implemementation of an sqlite configuration backend 2007-09-18 07:12:21 +00:00
Martin Willi c93a608747 removed unneded template logout.cs, fixes #10 2007-09-18 05:37:31 +00:00
Martin Willi bd2e6c0347 added connection name to IKE_SA title 2007-09-14 14:18:09 +00:00
Martin Willi d919f2f8db added missing distribution/install files 2007-09-14 14:17:43 +00:00
Martin Willi c01f7bf989 added subnets of CHILD_SAs to xml interface 
a first design of Managers IKE_SA list page
 2007-09-14 14:07:30 +00:00
Martin Willi 660426ff48 added DATA files to EXTRA_DIST 2007-09-13 08:32:14 +00:00
Martin Willi 6baca3b2f1 fixed 64bit issue with file descriptor 2007-09-13 08:19:15 +00:00
Martin Willi 367f9f01f7 added debugging helper script for manager 2007-09-13 08:15:24 +00:00
Martin Willi acc4aa8637 fixed scenario loading 2007-09-13 08:10:36 +00:00
Martin Willi d8c15900ad added missing enumerator.h to distribution 2007-09-13 08:06:17 +00:00
Martin Willi 068ba02775 replaced a confusing template with an ugly one (ikesalist) 2007-09-13 07:59:51 +00:00
Martin Willi b8c7453a82 manager can query and list IKE_SA status (no layout yet) 2007-09-13 07:45:04 +00:00
Martin Willi dd52993068 only switch to port 4500 if we are on 500: fixed reauthentication in NAT 
scenarios
 2007-09-12 11:11:10 +00:00
Martin Willi a8827c9b63 moving virtual IP when interface changes due mobike 2007-09-12 07:36:45 +00:00
Martin Willi 12fa4387c6 fixed NAT detection with mobike 2007-09-12 07:14:05 +00:00
Martin Willi 39cc6d1ad7 fixed shutdown order to prevent crash when kernel interface schedules events 2007-09-12 07:12:25 +00:00
Martin Willi f25156dfc3 fixed warnings and memory leak 2007-09-12 07:11:41 +00:00
Martin Willi 965e99b5bf first revision of new manager webapp 2007-09-11 15:22:02 +00:00
Martin Willi 5474dc6500 implemented routeability checks for mobike (experimental) 2007-09-03 12:37:25 +00:00
Martin Willi 354242c55a added RADIUS, RADIUS-EAP and EAP-MD5 (CHAP) RFCs 2007-08-30 12:52:44 +00:00
Martin Willi 857ceac9d9 proper initialization of rsa private key 2007-08-30 12:47:38 +00:00
Martin Willi 9164e49ac0 added mobike=yes|no connection option 
yes: include mobike support notifies as initiator
  no: only enable mobike as responder when initiator supports it
  default: yes
 2007-08-29 12:11:25 +00:00
Martin Willi dc5a849bf0 signers implemented with HMAC now support NULL output parameters 
to feed signer with more than one block of data.
 2007-08-29 07:52:49 +00:00
Martin Willi 69e56d9dec simple console support through pts devices 2007-08-28 07:53:46 +00:00
Martin Willi 0739cca9d1 default routing table/prio: 220/220 (as 19530 was invalid) 
added configure option --with-routing-table-prio=
 2007-08-27 14:53:42 +00:00
Martin Willi ad9613226b using default routing table 19530 for ipsec routes 2007-08-27 11:30:21 +00:00
Martin Willi 4e411c8361 added --with-routing-table= configure option 2007-08-27 11:15:35 +00:00
Martin Willi 98f97433af rerouting CHILD_SA if its IKE_SA gets deleted 2007-08-27 09:10:12 +00:00
Martin Willi 7acfe286fd fixed build without --enable-uml 2007-08-10 09:14:20 +00:00
Martin Willi 4614d589c0 fixed build without --enable-uml 2007-08-10 08:58:37 +00:00
Martin Willi f8ced47f5c reread notify socket when interrupted (EINTR) through sigchild 2007-08-10 06:01:03 +00:00
Martin Willi 567019c8d5 fixed libstrongswan linking for libdumm 2007-08-09 12:50:01 +00:00
Martin Willi 939e93787e made linked lists invoke() method consistent to clone_*() and destroy_*() methods 2007-08-09 12:43:11 +00:00
Martin Willi 10c6cc0a36 removed Makefile from svn 
support for scenario switching
 2007-08-09 07:14:56 +00:00
Martin Willi fd4ded974d build UML stuff only on --enable-uml 2007-08-08 14:24:25 +00:00
Martin Willi f2d6355eaa added UML modeler to autotools 2007-08-08 14:03:55 +00:00
Martin Willi 7b7201bee6 usable without scenarios 2007-08-08 12:35:24 +00:00
Martin Willi 8f5b363c30 updated NEWS for 4.1.5 2007-08-07 06:48:48 +00:00
Martin Willi 3b574567ea fixed segfault when sourceip in stroke message is NULL 2007-08-06 12:35:28 +00:00
Martin Willi 64a552ae2d cowfs is bootable now! 2007-08-06 11:42:32 +00:00
Martin Willi 9ec19f13f7 allow starter to initiate connections simultaneously (on auto=start) 2007-08-06 07:41:19 +00:00
Martin Willi 5ce04046f7 proper shutdown 
moved signal handler for SIGCHD and SIGHUP to dumm
 2007-08-03 11:47:20 +00:00
Martin Willi 404d3ba58e working cowfs prototype 2007-08-03 09:33:43 +00:00
Martin Willi f8afabcac3 started own cowfs implementation 2007-07-31 15:23:23 +00:00
Martin Willi 725e263ff3 bridging using libbridge 
rewrite of guest, does not change cwd anymore
loading of created scenarios
 2007-07-30 13:20:35 +00:00
Martin Willi 99652427e9 properly shutdown of clients 2007-07-27 10:17:50 +00:00
Martin Willi 539a55a441 support for killing guests properly 2007-07-27 07:37:15 +00:00
Martin Willi 5b608fd7ca implemented mconsole notification to check if guest came up 
slightly modified menu commands
 2007-07-26 13:21:06 +00:00
Martin Willi 369a17c218 fixed tap device setup (requires open/close for each call) 
using more meaningful names for tap devices
 2007-07-26 07:39:49 +00:00
Martin Willi 53b0f3c3b3 fixed mconsole when using multiple guests 
fixed interface enumeration bug
 2007-07-25 14:05:06 +00:00
Martin Willi f85fdda835 added dynamic interface manipulation for guests 
management of tap devices on the host
 2007-07-25 13:23:45 +00:00
Martin Willi 5c7da9d402 checked in first draft of "Dynamic Uml Mesh Modeler" 2007-07-24 14:22:56 +00:00
Martin Willi ac1557af51 updated XML interface to new schema 2007-07-19 10:57:33 +00:00
Martin Willi c87395908a not touching IKE_SA_INIT from ike_mobike_t anymore 2007-07-19 08:08:22 +00:00
Martin Willi 0308865282 fixed compiler warning 2007-07-16 07:10:14 +00:00
Martin Willi cc68e173fe fixed payload order (Nonce, KE) for IKE_SA_INIT 2007-07-16 07:01:49 +00:00
Martin Willi e5e868e430 doing route lookup in userspace to ignore routes installed by us 2007-07-11 12:37:24 +00:00
Martin Willi 9ba1d73890 using own routing table for installed routes (table 100, prio 100) 2007-07-11 06:55:11 +00:00
Martin Willi 19ff7d2207 added first draft of SMP relax-ng schema 2007-07-06 13:44:43 +00:00
Martin Willi fa1bd44f23 ignoring unkown crl/ocsp uris 2007-07-04 12:00:33 +00:00
Martin Willi 1b8da84913 using correct nexthop for inserted route 2007-07-04 09:10:13 +00:00